[Freeipa-users] Syncing AD to IPA users

We managed to use IPA users as AIX users in our environment. Preferrably, we would like to use users from an AD group directly what does not seem to be possible without SSSD for AIX, right? As an alternative it would be great to synchronize users in a specific AD group to IPA users. I already have a draft of a python script in mind that could do the job. Is there any way go synchronize a user's password from AD? Cheers, Ronald